Vedaang/malware_analysis

Malware Analysis Dataset

This dataset contains memory forensics analysis data for malware research, including both benign and ransomware samples analyzed with Volatility Framework.

Structure

Dataset Repository (this repo)

• —Scripts: Volatility automation scripts (Automating_Volatility.py, Volshell_Automation.py, vboxelf.py)
• —YARA Rules: malware_rules.yar for malware detection
• —Scan Results: Lightweight analysis outputs:
• —malfind/ - Process memory injection detection
• —pslist/ - Process listing
• —psscan/ - Process scanning
• —pstree/ - Process tree
• —psxview/ - Process cross-view analysis
• —yarascan/ - YARA rule matches

Raw Data Bucket (hf://buckets/Vedaang/malware-raw-dumps/)

Large memory dumps and detailed scans stored separately:

• —`benign/` - Benign memory dumps (6 × 4.5GB .raw files)
• —`benign/elf/` - Benign ELF binaries (6 files)
• —`ransomware/` - Ransomware memory dumps (12 × 4.5GB .raw files)
• —`ransomware/elf/` - Ransomware ELF binaries (12 files)
• —`scans/memmap/` - Detailed memory maps (large text files)
• —`scans/vadinfo/` - VAD (Virtual Address Descriptor) info
• —`scans/vadwalk/` - VAD walk analysis

Sample Categories

Benign Samples

• —base.raw / base.elf - Baseline clean system
• —clean.raw / clean.elf - Clean system snapshot
• —3.raw - 10.raw / 3.elf - 10.elf - Various benign workloads

Ransomware Samples

Usage

Access Dataset (Analysis Files)

hf download Vedaang/malware_analysis

Access Raw Memory Dumps (Bucket)

# Install hf CLI if needed
pip install huggingface_hub[hf_transfer]

# Sync raw dumps
hf sync hf://buckets/Vedaang/malware-raw-dumps/benign ./local_benign --include "*.raw"
hf sync hf://buckets/Vedaang/malware-raw-dumps/ransomware ./local_ransomware --include "*.raw"

Run Volatility Analysis

# Using included scripts
python Automating_Volatility.py -f memory.raw --profile Win10x64_19041
python Volshell_Automation.py -f memory.raw

Analysis Tools

• —Volatility 3 - Memory forensics framework
• —YARA - Pattern matching for malware identification
• —Custom Python scripts - Automation wrappers

Citation

If you use this dataset in research, please cite:

@dataset{malware_analysis_2026,
  author = {Vedaang Chopra},
  title = {Malware Analysis Memory Forensics Dataset},
  year = {2026},
  publisher = {Hugging Face},
  url = {https://huggingface.co/datasets/Vedaang/malware_analysis}
}

License

This dataset is for research purposes only. Memory dumps contain no sensitive user data.